V12 issues - #126

Open

illuzen wants to merge 56 commits into

mainfrom

Commits on Aug 4, 2026

fix(wallet): stop accepting mnemonic and seed via CLI flags

illuzen
and
cursoragent
committed
03dad4d
fix(wallet): skip malformed files when listing wallets

illuzen
and
cursoragent
committed
253c791
fix(multisig): correlate MultisigCreated to creator and params

illuzen
and
cursoragent
committed
d2ac243
fix(wallet): reject raw --password CLI credentials

illuzen
and
cursoragent
committed
e6dd668
fix(tx): fail when watched extrinsic is missing from block

illuzen
and
cursoragent
committed
58b8780
fix(wallet): enforce owner-only keystore permissions

illuzen
and
cursoragent
committed
3bc368c
fix(wallet): require restrictive password-file permissions

illuzen
and
cursoragent
committed
27d8a9f
fix(batch): use utility.batch_all for atomic transfers

illuzen
and
cursoragent
committed
0460883
fix(wormhole): require persisted mnemonic for HD secrets

illuzen
and
cursoragent
committed
f111d9b
fix(tx): stop unsafe nonce-bump retries on ambiguous errors

illuzen
and
cursoragent
committed
dfd96c0
fix(wallet): authenticate address metadata and fail closed on migration

illuzen
and
cursoragent
committed
02c741a
fix(wallet): harden storage races and exclusive wallet creation

illuzen
and
cursoragent
committed
bfd228e
fix(client): verify Quantus runtime identity at connect time

illuzen
and
cursoragent
committed
a8051b1
fix(system): fail closed on invalid RPC token properties

illuzen
and
cursoragent
committed
304d6d5
fix(wormhole): bind transfer events to from amount and count

illuzen
and
cursoragent
committed
5fc7920
fix(update): verify release archive SHA-256 before install

illuzen
and
cursoragent
committed
c5d3f2d
fix(wallet): refuse to persist wallets with embedded AES key material

illuzen
and
cursoragent
committed
eeaefa7
fix(wallet): return errors for malformed public keys

illuzen
and
cursoragent
committed
95c1fc9
fix(client): redact WebSocket URL credentials in diagnostics

illuzen
and
cursoragent
committed
986c2cd
fix(wormhole): remove --secret argv and verify extrinsic failures

illuzen
and
cursoragent
committed
a710bf6
fix(wallet): write exported mnemonics to a protected file

illuzen
and
cursoragent
committed
0bec0ea
fix(multisig): deduplicate signers before predict and threshold

illuzen
and
cursoragent
committed
1e9e910
fix(storage): bound pagination against overflow and stuck cursors

illuzen
and
cursoragent
committed
b7039e6
fix(tx): bound transaction-status subscription waits

illuzen
and
cursoragent
committed
5015a2e
fix(rewards): use checked addition for indexer transfer totals

illuzen
and
cursoragent
committed
12d3ff6
fix(batch): enforce runtime batched_calls_limit for batch size

illuzen
and
cursoragent
committed
bcdab11
fix(subsquid): harden exhaustive transfer queries and spent filtering

illuzen
and
cursoragent
committed
fb5b36f
fix(wormhole): zeroize proof-generation secrets after use

illuzen
and
cursoragent
committed
fbd38ed
fix(wormhole): validate Merkle depth and prefer finalized snapshots

illuzen
and
cursoragent
committed
8cd2d4c
fix(wallet): zeroize secret material after encrypt and decrypt

illuzen
and
cursoragent
committed
06997c2
fix(cli): validate amounts delays ranks and fallible address helpers

illuzen
and
cursoragent
committed
fdaee0c
fix(bins): authenticate circuit artifacts and publish atomically

illuzen
and
cursoragent
committed
7f569f9
fix(cli): bound ranges and reject silent zero coercions

illuzen
and
cursoragent
committed
ccc244a
fix(wallet): require an explicit password when creating wallets

illuzen
and
cursoragent
committed
3d781aa
chore: silence clippy -D warnings failures

illuzen
and
cursoragent
committed
82867b5
style: apply rustfmt after clippy run

illuzen
and
cursoragent
committed
e6f112a
fix(tx): don't abort finalization waits on 30s inactivity

illuzen
and
cursoragent
committed
2a58798
ci: remove CodeQL workflow

illuzen
and
cursoragent
committed
ea9318e
fmt
illuzen
committed
3278801

Commits on Aug 5, 2026

fix(config): expect real runtime spec name quantus-runtime

illuzen
and
cursoragent
committed
544de1d
fix(wormhole): zeroize proof input secret without UB

illuzen
and
cursoragent
committed
f965ba3
fix(bins): auto-regenerate stale circuit artifacts after upgrades

illuzen
and
cursoragent
committed
bf9ce6c
fix(block): compute block-list count in u64 to avoid u32 wrap

illuzen
and
cursoragent
committed
e115f2b
fix(wallet): unlock or honestly report protected wallets in name resolution

illuzen
and
cursoragent
committed
e6a6897
fix(wallet): allow deleting corrupt wallet files

illuzen
and
cursoragent
committed
04a0aed
fix(wallet): apply new-password policy to import and from-seed

illuzen
and
cursoragent
committed
fd01d69
fix(keystore): reject Windows-reserved characters in wallet names

illuzen
and
cursoragent
committed
5c1ff3d
fix(wormhole): take collect-rewards mnemonic from a file

illuzen
and
cursoragent
committed
ae57fd5
fix(wormhole): prove collect-rewards against finalized tip

illuzen
and
cursoragent
committed
6e248de
fix(wormhole): bound unsigned verify finalization waits

illuzen
and
cursoragent
committed
c86a9b0
fix(wormhole): read dissolve events from inclusion block

illuzen
and
cursoragent
committed
f0797f1
chore(wormhole): drop unused submit_transaction import

illuzen
and
cursoragent
committed
4cd1838
fix(exercise): recognize SubXT pool rejections as clean fuzz failures

illuzen
and
cursoragent
committed
622190a
fix(bins): share MANIFESTED_FILES via bins_consts

illuzen
and
cursoragent
committed
d0f0a9e
docs: justify CodeQL workflow removal in the V12 PR notes

illuzen
and
cursoragent
committed
bd423e2
fmt
illuzen
committed
3e7d260